CVE-2026-48800-PoC

CVE-2026-48800 — Notepad++ Arbitrary Code Execution PoC Severity: High | Affected: Notepad++ ≤ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48800, an arbitrary code execution vulnerability in Notepad++ ≤ 8.9.6 via shortcuts.xml. For full technical details, see the official security advisor...

Cartographer

Cartographer Mapping Out Code Coverage Developed by Austin Peavy - https://github.com/aus10pv Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under the Apache 2.0 license see LICENSE for more information Description Cartographer is a code coverage mapping plugin for...

ApacheRCEEssay

CVE-2021-41773 Essay 🕸️ Description 🖼️ This repository contains an essay about CVE-2021-41773, a remote code execution vulnerability in Apache 2.4.49. This was created for a course from Faculty of Automatic Control and Computers, University POLITEHNICA of Bucharest, namely "Cyberdefences and...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

TongDa-RCE

TongDa-RCE Tongda file inclusion + file upload leads to RCE Usage Remote RCE: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...

CVE-2020-2555

CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE com.supeream.CVE20202555 / author:Y4er.com gadget: BadAttributeValueExpException.readObject com.tangosol.util.filter.LimitFilter.toString com.tangosol.util.extractor.ChainedExtractor.extract...

CVE-2020-5902

Readme F5 BIG-IP arbitrary file read + remote command execution RCE +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ ...

CVE-2026-6951

CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Overview CVE-2026-6951 is a remote code execution vulnerability in simple-git caused by an incomplete f...

CVE-2026-49869

CVE-2026-49869: Kestra Unauthenticated Remote Code Execution ★PoC and Docker lab for the authentication bypass in Kestra OSS AuthenticationFilter★ Run this lab only on systems you control. The -p 8080:8080 example may publish the vulnerable API on all host interfaces; block access from other...

CVE-2026-22444

CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview This vulnerability was discovered and disclosed to Apache in 2025. It affects Apache Solr's core creation functionality, where network access to UNC paths occurs before path validation checks are performed. On Windows systems...

VertXploit

VertXploit Exploiting HID VertX and EDGE access control systems Summary VertXploit is a tool that can be used to exploit HID VertX and EDGE access control systems. A vulnerability exists within the discoveryd service, which fails to sanitize user data before executing system calls. This allows fo...

IDA_Plugin_PCodeGPT

PCodeGPT A plugin for ida 7.5 7.x and 8.x. Description This is a gepetto and WPeChatGPT modified IDA plug-in that I use to automate code analysis using OpenAI's GPT 3.5 or GPT-4. Currently, only Chinese is supported. Usage Move PCodeGPT.py into the plugins folder, and the plug-in will be...

CVE-2022-24934

CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...

Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...

st2-048

St2-048 Remote Code Execution Vulnerability Apache Struts 2 possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Use-Age: python St2-048.py set url :...

IE11SandboxEscapes

IE11SandboxEscapes Some example source code for fixed IE11 sandbox escapes. c James Forshaw 2014 For information purposes only. All files are licensed under GPLv3. See LICENSE for more information...

Exploit for CVE-2026-109618

PHP session.uploadprogress vulnerability: PoC and validatio...

sonarqube

SonarQube SonarQube is the algorithmic verification platform for code quality and security. Its static analysis applies techniques such as symbolic execution and data and control flow analysis to inspect your code, find bugs, vulnerabilities, and structural problems, and tell you exactly what to...

gh0st3.6_src

Uploaded by flAmingw0rm Great RAT to learn from...

CVE-2026-40897

CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...